Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File:                     GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier:          oV0sOtR1ugA3FT80iBcRyNLkDk6clKSxHv2fwlmPACc=
Subject key identifier:   26:E4:DA:28:8E:B0:CE:C8:54:39:C9:4E:F1:BA:D7:CD:55:B9:C8:36
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer:       /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial:       01A181F49FDF2BDFF7F68B8BA3C252F2FAED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number:          11B0
Signing time:             Wed 28 Oct 2026 10:00:54 +0000
Manifest this update:     Wed 28 Oct 2026 10:00:54 +0000
Manifest next update:     Thu 29 Oct 2026 10:00:54 +0000
Files and hashes:         1: 0-Du4a3wTcLjHP17S235eocvetM.roa (hash: u4GgqQE96O1hG6gnLUh00BTZ9JVaaf72zWAUZel0hK4=)
                          2: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: guIM8BurJ0ib3MeTKj1w8jqLD8oOx+zMpaeZIMR1xQo=)
                          3: rw01fr1t_p6yAH6IdbMhs5zW9Xs.roa (hash: xwniHCIPcTk6T6SZ9CnReFPZPS7gn1Cci1vAjNWFN+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:f4:9f:df:2b:df:f7:f6:8b:8b:a3:c2:52:f2:fa:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
        Validity
            Not Before: Oct 28 10:00:54 2026 GMT
            Not After : Oct 29 10:00:54 2026 GMT
        Subject: CN=26e4da288eb0cec85439c94ef1bad7cd55b9c836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:e5:c3:51:3c:e6:bb:5b:12:f4:b4:65:5b:
                    33:3b:5b:a7:8f:e5:c3:10:82:60:68:83:81:40:4e:
                    2d:cd:28:af:a2:15:47:ec:18:81:3a:8b:2b:9e:82:
                    b9:e4:aa:d7:57:96:65:13:75:6b:91:35:1a:5d:d7:
                    f7:ab:1d:20:a1:0a:7d:2c:ad:1a:9c:71:d1:22:81:
                    f1:e4:a2:6d:da:82:ae:72:ad:07:3a:25:11:ff:04:
                    89:60:e5:bb:9b:bf:f7:42:ce:43:d1:dc:15:3b:88:
                    3b:7f:49:a9:bc:6a:74:20:ce:61:0c:52:91:46:45:
                    16:08:5b:a0:11:fb:49:39:f0:4f:d9:ad:e2:82:a2:
                    47:1b:32:b4:7f:43:e2:c0:d2:f8:54:31:54:65:3d:
                    62:ef:40:41:a3:f3:16:29:eb:a5:41:e3:18:9f:90:
                    b7:45:22:d4:bc:87:70:b1:8b:23:2b:41:b7:90:83:
                    4b:03:b6:9d:f3:ed:f7:e9:3d:77:5a:59:a1:78:01:
                    3a:d7:54:40:f3:b3:b8:d4:25:a6:71:69:bb:76:f8:
                    38:dd:f7:c2:27:94:54:c4:d3:44:7c:d2:6f:ee:2b:
                    48:f2:2e:7c:c4:66:73:96:3c:f1:7e:69:79:2a:77:
                    25:43:bb:d6:4d:2f:4d:11:96:fa:56:71:bc:16:aa:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E4:DA:28:8E:B0:CE:C8:54:39:C9:4E:F1:BA:D7:CD:55:B9:C8:36
            X509v3 Authority Key Identifier:
                keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:40:43:a9:07:cf:4c:9d:36:25:28:03:25:48:bf:bd:b7:46:
         f4:55:f6:ba:81:b3:2f:56:f6:15:1b:5c:03:d2:07:8c:35:01:
         3b:6a:f8:6b:48:5c:7a:0f:c7:fb:6b:a3:a8:24:3d:ce:3e:f9:
         05:33:07:c7:8a:a2:a2:22:69:fa:fd:78:f5:d1:c0:b4:07:4e:
         bf:6a:2f:15:f3:bc:90:bf:5e:81:ab:28:ed:4d:8f:47:66:f2:
         a0:77:34:8a:ce:32:d2:c4:56:df:df:4c:16:55:31:04:30:59:
         6b:b7:7a:49:40:36:86:5f:82:ba:78:d1:35:0e:e3:f0:ef:67:
         ae:be:f2:ba:11:ff:d6:d3:bc:b1:d5:b6:7b:0b:f3:34:77:3d:
         85:f7:6b:bd:f7:d3:77:ee:df:c4:70:5c:5f:e2:c8:3b:16:3b:
         ad:d3:be:28:5b:1a:76:2d:77:68:94:86:03:b9:01:67:1f:4e:
         c4:8a:3e:e2:60:4a:c9:d6:3f:33:0c:f0:aa:7e:72:00:1c:de:
         33:f0:ed:19:5d:13:c9:ec:cc:e4:cf:93:de:d3:52:6d:84:2e:
         e7:04:37:67:e7:59:b3:4f:98:25:44:75:2c:8d:93:9f:6e:72:
         a2:b6:c5:cf:41:e7:81:06:5e:a5:63:16:ef:3a:15:6a:ea:f6:
         5a:b2:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:16 2026 by rpki-client